CYBERSECURITYTRACKER
Permanent story citation

CVE-2026-111813 etc: Multiple vulnerabilities in Apache Traffic Server prior to 9.2.16/10.1.5/10.2.1

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 11253

As cited

Copy frozen at (site build).

vulnerabilities

CVE-2026-111813 etc: Multiple vulnerabilities in Apache Traffic Server prior to 9.2.16/10.1.5/10.2.1

Apache Traffic Server released patches for multiple vulnerabilities in versions 9.2.16, 10.1.5, and 10.2.1, with one flaw rated CVSS 10.0. The announcement was posted to the project mailing lists on October 20, 2026.

Why it matters: Organizations running Apache Traffic Server must apply these patches immediately to close a critical remote code execution path affecting all supported versions.

CVEsCVE-2026-111813
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary

Open in glossary